Plugin icon

WP Coder – Insert & Manage Code Snippets

wp-coder

Vulnerabilities:

6

Last Updated:

December 2, 2025

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2025-01-31
Title
WP Coder – Code Snippets + HTML, CSS, JS and PHP Injection < 3.6.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Fixed in
Fixed in 3.6.1
CVSS
6.1 (medium)
Published
2024-03-18
Title
WP Coder < 3.5.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.5.1
CVSS
4.4 (medium)
Published
2023-05-22
Title
Multiple Plugins from Wow-Company - Reflected XSS
Fixed in
Fixed in 2.5.6
CVSS
5.8 (medium)
Published
2023-02-17
Title
WP Coder < 2.5.4 - Admin+ SQLi
Fixed in
Fixed in 2.5.4
CVSS
6.8 (medium)
Published
2022-07-26
Title
WP Coder < 2.5.3 - Code Deletion via CSRF
Fixed in
Fixed in 2.5.3
CVSS
4.3 (medium)
Published
2021-12-05
Title
WP Coder < 2.5.2 - RFI leading to RCE via CSRF
Fixed in
Fixed in 2.5.2
CVSS
8.4 (high)